<!DOCTYPE html
  PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  "DTD/xhtml1-strict.dtd">
<html>
  <head>
    <title>volatility.plugins.malware.callbacks.PoolScanPnpD : API documentation</title>
    <meta content="text/html;charset=utf-8" http-equiv="Content-Type" />
    <link href="apidocs.css" type="text/css" rel="stylesheet" />
    
    
  </head>
  <body>
    <h1 class="class">v.p.m.c.PoolScanPnpD(<a href="volatility.plugins.malware.callbacks.AbstractCallbackScanner.html">AbstractCallbackScanner</a>) : class documentation</h1>
    <p>
      <span id="part">Part of <a href="volatility.html">volatility</a>.<a href="volatility.plugins.html">plugins</a>.<a href="volatility.plugins.malware.html">malware</a>.<a href="volatility.plugins.malware.callbacks.html">callbacks</a></span>
      
      <a href="classIndex.html#volatility.plugins.malware.callbacks.PoolScanPnpD">View In Hierarchy</a>
    </p>
    <div>
      
    </div>
    <div>PoolScanner for PnpD (EventCategoryDeviceInterfaceChange)<table class="fieldTable"></table></div>

    
    
    <div id="splitTables">
      
      
        <p>
          Inherited from <a href="volatility.plugins.malware.callbacks.AbstractCallbackScanner.html">AbstractCallbackScanner</a>:
        </p>
        <table class="children sortable" id="id269">
  
  
<tr class="basemethod">
    
    
    <td>Method</td>
    <td><a href="volatility.plugins.malware.callbacks.AbstractCallbackScanner.html#object_offset">object_offset</a></td>
    <td><span>The name of this function &quot;object_offset&quot; can be misleading depending on how its used. Even before removing the preambles (r1324), it may not always return the offset of an object. Here are the rules:</span></td>
  </tr>
  
</table>
      
        <p>
          Inherited from <a href="volatility.scan.PoolScanner.html">PoolScanner</a> (via <a href="volatility.plugins.malware.callbacks.AbstractCallbackScanner.html">AbstractCallbackScanner</a>):
        </p>
        <table class="children sortable" id="id270">
  
  
<tr class="basemethod">
    
    
    <td>Method</td>
    <td><a href="volatility.scan.PoolScanner.html#scan">scan</a></td>
    <td><span class="undocumented">Undocumented</span></td>
  </tr>
  
</table>
      
        <p>
          Inherited from <a href="volatility.scan.BaseScanner.html">BaseScanner</a> (via <a href="volatility.plugins.malware.callbacks.AbstractCallbackScanner.html">AbstractCallbackScanner</a>, <a href="volatility.scan.PoolScanner.html">PoolScanner</a>):
        </p>
        <table class="children sortable" id="id271">
  
  
<tr class="basemethod">
    
    
    <td>Method</td>
    <td><a href="volatility.scan.BaseScanner.html#__init__">__init__</a></td>
    <td><span class="undocumented">Undocumented</span></td>
  </tr><tr class="basemethod">
    
    
    <td>Method</td>
    <td><a href="volatility.scan.BaseScanner.html#check_addr">check_addr</a></td>
    <td><span>This calls all our constraints on the offset found and returns the number of contraints that matched.</span></td>
  </tr>
  
</table>
      
      
    </div>
    
    
    

    
    <address>
      <a href="index.html">API Documentation</a> for Volatility 2.2, generated by <a href="http://codespeak.net/~mwh/pydoctor/">pydoctor</a> at 2013-06-24 15:16:10.
    </address>
  </body>
</html>